chad-code 1.3.1 → 1.3.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (338) hide show
  1. package/README.md +55 -6
  2. package/chad-code-0.0.0-main-202601090906.tgz +0 -0
  3. package/package.json +35 -97
  4. package/AGENTS.md +0 -27
  5. package/Dockerfile +0 -18
  6. package/README.npm.md +0 -64
  7. package/bunfig.toml +0 -7
  8. package/eslint.config.js +0 -29
  9. package/parsers-config.ts +0 -253
  10. package/script/build.ts +0 -167
  11. package/script/publish-registries.ts +0 -187
  12. package/script/publish.ts +0 -93
  13. package/script/schema.ts +0 -47
  14. package/src/acp/README.md +0 -164
  15. package/src/acp/agent.ts +0 -1086
  16. package/src/acp/session.ts +0 -101
  17. package/src/acp/types.ts +0 -22
  18. package/src/agent/agent.ts +0 -253
  19. package/src/agent/generate.txt +0 -75
  20. package/src/agent/prompt/compaction.txt +0 -12
  21. package/src/agent/prompt/explore.txt +0 -18
  22. package/src/agent/prompt/summary.txt +0 -11
  23. package/src/agent/prompt/title.txt +0 -36
  24. package/src/auth/index.ts +0 -70
  25. package/src/bun/index.ts +0 -130
  26. package/src/bus/bus-event.ts +0 -43
  27. package/src/bus/global.ts +0 -10
  28. package/src/bus/index.ts +0 -105
  29. package/src/cli/bootstrap.ts +0 -17
  30. package/src/cli/cmd/acp.ts +0 -69
  31. package/src/cli/cmd/agent.ts +0 -257
  32. package/src/cli/cmd/auth.ts +0 -132
  33. package/src/cli/cmd/cmd.ts +0 -7
  34. package/src/cli/cmd/debug/agent.ts +0 -28
  35. package/src/cli/cmd/debug/config.ts +0 -15
  36. package/src/cli/cmd/debug/file.ts +0 -91
  37. package/src/cli/cmd/debug/index.ts +0 -45
  38. package/src/cli/cmd/debug/lsp.ts +0 -48
  39. package/src/cli/cmd/debug/ripgrep.ts +0 -83
  40. package/src/cli/cmd/debug/scrap.ts +0 -15
  41. package/src/cli/cmd/debug/skill.ts +0 -15
  42. package/src/cli/cmd/debug/snapshot.ts +0 -48
  43. package/src/cli/cmd/export.ts +0 -88
  44. package/src/cli/cmd/generate.ts +0 -38
  45. package/src/cli/cmd/github.ts +0 -32
  46. package/src/cli/cmd/import.ts +0 -98
  47. package/src/cli/cmd/mcp.ts +0 -670
  48. package/src/cli/cmd/models.ts +0 -42
  49. package/src/cli/cmd/pr.ts +0 -112
  50. package/src/cli/cmd/run.ts +0 -374
  51. package/src/cli/cmd/serve.ts +0 -16
  52. package/src/cli/cmd/session.ts +0 -135
  53. package/src/cli/cmd/stats.ts +0 -402
  54. package/src/cli/cmd/tui/app.tsx +0 -705
  55. package/src/cli/cmd/tui/attach.ts +0 -32
  56. package/src/cli/cmd/tui/component/border.tsx +0 -21
  57. package/src/cli/cmd/tui/component/dialog-agent.tsx +0 -31
  58. package/src/cli/cmd/tui/component/dialog-command.tsx +0 -124
  59. package/src/cli/cmd/tui/component/dialog-mcp.tsx +0 -86
  60. package/src/cli/cmd/tui/component/dialog-model.tsx +0 -232
  61. package/src/cli/cmd/tui/component/dialog-provider.tsx +0 -228
  62. package/src/cli/cmd/tui/component/dialog-session-list.tsx +0 -115
  63. package/src/cli/cmd/tui/component/dialog-session-rename.tsx +0 -31
  64. package/src/cli/cmd/tui/component/dialog-stash.tsx +0 -86
  65. package/src/cli/cmd/tui/component/dialog-status.tsx +0 -162
  66. package/src/cli/cmd/tui/component/dialog-tag.tsx +0 -44
  67. package/src/cli/cmd/tui/component/dialog-theme-list.tsx +0 -50
  68. package/src/cli/cmd/tui/component/did-you-know.tsx +0 -85
  69. package/src/cli/cmd/tui/component/logo.tsx +0 -43
  70. package/src/cli/cmd/tui/component/prompt/autocomplete.tsx +0 -654
  71. package/src/cli/cmd/tui/component/prompt/history.tsx +0 -108
  72. package/src/cli/cmd/tui/component/prompt/index.tsx +0 -1078
  73. package/src/cli/cmd/tui/component/prompt/stash.tsx +0 -101
  74. package/src/cli/cmd/tui/component/textarea-keybindings.ts +0 -73
  75. package/src/cli/cmd/tui/component/tips.ts +0 -92
  76. package/src/cli/cmd/tui/component/todo-item.tsx +0 -32
  77. package/src/cli/cmd/tui/context/args.tsx +0 -14
  78. package/src/cli/cmd/tui/context/directory.ts +0 -13
  79. package/src/cli/cmd/tui/context/exit.tsx +0 -23
  80. package/src/cli/cmd/tui/context/helper.tsx +0 -25
  81. package/src/cli/cmd/tui/context/keybind.tsx +0 -101
  82. package/src/cli/cmd/tui/context/kv.tsx +0 -49
  83. package/src/cli/cmd/tui/context/local.tsx +0 -392
  84. package/src/cli/cmd/tui/context/prompt.tsx +0 -18
  85. package/src/cli/cmd/tui/context/route.tsx +0 -46
  86. package/src/cli/cmd/tui/context/sdk.tsx +0 -75
  87. package/src/cli/cmd/tui/context/sync.tsx +0 -384
  88. package/src/cli/cmd/tui/context/theme/aura.json +0 -69
  89. package/src/cli/cmd/tui/context/theme/ayu.json +0 -80
  90. package/src/cli/cmd/tui/context/theme/catppuccin-frappe.json +0 -233
  91. package/src/cli/cmd/tui/context/theme/catppuccin-macchiato.json +0 -233
  92. package/src/cli/cmd/tui/context/theme/catppuccin.json +0 -112
  93. package/src/cli/cmd/tui/context/theme/chad.json +0 -245
  94. package/src/cli/cmd/tui/context/theme/cobalt2.json +0 -228
  95. package/src/cli/cmd/tui/context/theme/cursor.json +0 -249
  96. package/src/cli/cmd/tui/context/theme/dracula.json +0 -219
  97. package/src/cli/cmd/tui/context/theme/everforest.json +0 -241
  98. package/src/cli/cmd/tui/context/theme/flexoki.json +0 -237
  99. package/src/cli/cmd/tui/context/theme/github.json +0 -233
  100. package/src/cli/cmd/tui/context/theme/gruvbox.json +0 -95
  101. package/src/cli/cmd/tui/context/theme/kanagawa.json +0 -77
  102. package/src/cli/cmd/tui/context/theme/lucent-orng.json +0 -227
  103. package/src/cli/cmd/tui/context/theme/material.json +0 -235
  104. package/src/cli/cmd/tui/context/theme/matrix.json +0 -77
  105. package/src/cli/cmd/tui/context/theme/mercury.json +0 -252
  106. package/src/cli/cmd/tui/context/theme/monokai.json +0 -221
  107. package/src/cli/cmd/tui/context/theme/nightowl.json +0 -221
  108. package/src/cli/cmd/tui/context/theme/nord.json +0 -223
  109. package/src/cli/cmd/tui/context/theme/one-dark.json +0 -84
  110. package/src/cli/cmd/tui/context/theme/orng.json +0 -245
  111. package/src/cli/cmd/tui/context/theme/osaka-jade.json +0 -93
  112. package/src/cli/cmd/tui/context/theme/palenight.json +0 -222
  113. package/src/cli/cmd/tui/context/theme/rosepine.json +0 -234
  114. package/src/cli/cmd/tui/context/theme/solarized.json +0 -223
  115. package/src/cli/cmd/tui/context/theme/synthwave84.json +0 -226
  116. package/src/cli/cmd/tui/context/theme/tokyonight.json +0 -243
  117. package/src/cli/cmd/tui/context/theme/vercel.json +0 -245
  118. package/src/cli/cmd/tui/context/theme/vesper.json +0 -218
  119. package/src/cli/cmd/tui/context/theme/zenburn.json +0 -223
  120. package/src/cli/cmd/tui/context/theme.tsx +0 -1137
  121. package/src/cli/cmd/tui/event.ts +0 -46
  122. package/src/cli/cmd/tui/routes/home.tsx +0 -138
  123. package/src/cli/cmd/tui/routes/session/dialog-fork-from-timeline.tsx +0 -64
  124. package/src/cli/cmd/tui/routes/session/dialog-message.tsx +0 -109
  125. package/src/cli/cmd/tui/routes/session/dialog-subagent.tsx +0 -26
  126. package/src/cli/cmd/tui/routes/session/dialog-timeline.tsx +0 -47
  127. package/src/cli/cmd/tui/routes/session/footer.tsx +0 -88
  128. package/src/cli/cmd/tui/routes/session/header.tsx +0 -125
  129. package/src/cli/cmd/tui/routes/session/index.tsx +0 -1814
  130. package/src/cli/cmd/tui/routes/session/permission.tsx +0 -416
  131. package/src/cli/cmd/tui/routes/session/sidebar.tsx +0 -318
  132. package/src/cli/cmd/tui/spawn.ts +0 -48
  133. package/src/cli/cmd/tui/thread.ts +0 -111
  134. package/src/cli/cmd/tui/ui/dialog-alert.tsx +0 -57
  135. package/src/cli/cmd/tui/ui/dialog-confirm.tsx +0 -83
  136. package/src/cli/cmd/tui/ui/dialog-export-options.tsx +0 -204
  137. package/src/cli/cmd/tui/ui/dialog-help.tsx +0 -38
  138. package/src/cli/cmd/tui/ui/dialog-prompt.tsx +0 -77
  139. package/src/cli/cmd/tui/ui/dialog-select.tsx +0 -345
  140. package/src/cli/cmd/tui/ui/dialog.tsx +0 -171
  141. package/src/cli/cmd/tui/ui/link.tsx +0 -28
  142. package/src/cli/cmd/tui/ui/spinner.ts +0 -368
  143. package/src/cli/cmd/tui/ui/toast.tsx +0 -100
  144. package/src/cli/cmd/tui/util/clipboard.ts +0 -127
  145. package/src/cli/cmd/tui/util/editor.ts +0 -32
  146. package/src/cli/cmd/tui/util/signal.ts +0 -7
  147. package/src/cli/cmd/tui/util/terminal.ts +0 -114
  148. package/src/cli/cmd/tui/util/transcript.ts +0 -98
  149. package/src/cli/cmd/tui/worker.ts +0 -68
  150. package/src/cli/cmd/uninstall.ts +0 -344
  151. package/src/cli/cmd/upgrade.ts +0 -67
  152. package/src/cli/cmd/web.ts +0 -73
  153. package/src/cli/error.ts +0 -56
  154. package/src/cli/network.ts +0 -53
  155. package/src/cli/ui.ts +0 -87
  156. package/src/cli/upgrade.ts +0 -25
  157. package/src/command/index.ts +0 -131
  158. package/src/command/template/initialize.txt +0 -10
  159. package/src/command/template/review.txt +0 -97
  160. package/src/config/config.ts +0 -1124
  161. package/src/config/markdown.ts +0 -41
  162. package/src/env/index.ts +0 -26
  163. package/src/file/ignore.ts +0 -83
  164. package/src/file/index.ts +0 -411
  165. package/src/file/ripgrep.ts +0 -402
  166. package/src/file/time.ts +0 -64
  167. package/src/file/watcher.ts +0 -117
  168. package/src/flag/flag.ts +0 -52
  169. package/src/format/formatter.ts +0 -359
  170. package/src/format/index.ts +0 -137
  171. package/src/global/index.ts +0 -55
  172. package/src/id/id.ts +0 -73
  173. package/src/ide/index.ts +0 -77
  174. package/src/index.ts +0 -159
  175. package/src/installation/index.ts +0 -198
  176. package/src/lsp/client.ts +0 -252
  177. package/src/lsp/index.ts +0 -485
  178. package/src/lsp/language.ts +0 -119
  179. package/src/lsp/server.ts +0 -2023
  180. package/src/mcp/auth.ts +0 -135
  181. package/src/mcp/index.ts +0 -874
  182. package/src/mcp/oauth-callback.ts +0 -200
  183. package/src/mcp/oauth-provider.ts +0 -154
  184. package/src/patch/index.ts +0 -622
  185. package/src/permission/arity.ts +0 -163
  186. package/src/permission/index.ts +0 -210
  187. package/src/permission/next.ts +0 -268
  188. package/src/plugin/index.ts +0 -106
  189. package/src/project/bootstrap.ts +0 -31
  190. package/src/project/instance.ts +0 -78
  191. package/src/project/project.ts +0 -263
  192. package/src/project/state.ts +0 -65
  193. package/src/project/vcs.ts +0 -76
  194. package/src/provider/auth.ts +0 -143
  195. package/src/provider/models-macro.ts +0 -4
  196. package/src/provider/models.ts +0 -77
  197. package/src/provider/provider.ts +0 -516
  198. package/src/provider/transform.ts +0 -114
  199. package/src/pty/index.ts +0 -212
  200. package/src/server/error.ts +0 -36
  201. package/src/server/mdns.ts +0 -57
  202. package/src/server/project.ts +0 -79
  203. package/src/server/server.ts +0 -2866
  204. package/src/server/tui.ts +0 -71
  205. package/src/session/compaction.ts +0 -225
  206. package/src/session/index.ts +0 -469
  207. package/src/session/llm.ts +0 -213
  208. package/src/session/message-v2.ts +0 -742
  209. package/src/session/message.ts +0 -189
  210. package/src/session/processor.ts +0 -402
  211. package/src/session/prompt/anthropic-20250930.txt +0 -166
  212. package/src/session/prompt/anthropic.txt +0 -105
  213. package/src/session/prompt/anthropic_spoof.txt +0 -1
  214. package/src/session/prompt/beast.txt +0 -147
  215. package/src/session/prompt/build-switch.txt +0 -5
  216. package/src/session/prompt/codex.txt +0 -318
  217. package/src/session/prompt/copilot-gpt-5.txt +0 -143
  218. package/src/session/prompt/gemini.txt +0 -155
  219. package/src/session/prompt/max-steps.txt +0 -16
  220. package/src/session/prompt/plan-reminder-anthropic.txt +0 -67
  221. package/src/session/prompt/plan.txt +0 -26
  222. package/src/session/prompt/qwen.txt +0 -109
  223. package/src/session/prompt.ts +0 -1621
  224. package/src/session/retry.ts +0 -90
  225. package/src/session/revert.ts +0 -108
  226. package/src/session/status.ts +0 -76
  227. package/src/session/summary.ts +0 -194
  228. package/src/session/system.ts +0 -108
  229. package/src/session/todo.ts +0 -37
  230. package/src/share/share-next.ts +0 -194
  231. package/src/share/share.ts +0 -23
  232. package/src/shell/shell.ts +0 -67
  233. package/src/skill/index.ts +0 -1
  234. package/src/skill/skill.ts +0 -124
  235. package/src/snapshot/index.ts +0 -197
  236. package/src/storage/storage.ts +0 -226
  237. package/src/tool/bash.ts +0 -262
  238. package/src/tool/bash.txt +0 -116
  239. package/src/tool/batch.ts +0 -175
  240. package/src/tool/batch.txt +0 -24
  241. package/src/tool/codesearch.ts +0 -132
  242. package/src/tool/codesearch.txt +0 -12
  243. package/src/tool/edit.ts +0 -655
  244. package/src/tool/edit.txt +0 -10
  245. package/src/tool/glob.ts +0 -75
  246. package/src/tool/glob.txt +0 -6
  247. package/src/tool/grep.ts +0 -132
  248. package/src/tool/grep.txt +0 -8
  249. package/src/tool/invalid.ts +0 -17
  250. package/src/tool/ls.ts +0 -119
  251. package/src/tool/ls.txt +0 -1
  252. package/src/tool/lsp.ts +0 -94
  253. package/src/tool/lsp.txt +0 -19
  254. package/src/tool/multiedit.ts +0 -46
  255. package/src/tool/multiedit.txt +0 -41
  256. package/src/tool/patch.ts +0 -210
  257. package/src/tool/patch.txt +0 -1
  258. package/src/tool/read.ts +0 -191
  259. package/src/tool/read.txt +0 -12
  260. package/src/tool/registry.ts +0 -137
  261. package/src/tool/skill.ts +0 -77
  262. package/src/tool/task.ts +0 -167
  263. package/src/tool/task.txt +0 -60
  264. package/src/tool/todo.ts +0 -53
  265. package/src/tool/todoread.txt +0 -14
  266. package/src/tool/todowrite.txt +0 -167
  267. package/src/tool/tool.ts +0 -73
  268. package/src/tool/webfetch.ts +0 -182
  269. package/src/tool/webfetch.txt +0 -13
  270. package/src/tool/websearch.ts +0 -144
  271. package/src/tool/websearch.txt +0 -11
  272. package/src/tool/write.ts +0 -84
  273. package/src/tool/write.txt +0 -8
  274. package/src/util/archive.ts +0 -16
  275. package/src/util/color.ts +0 -19
  276. package/src/util/context.ts +0 -25
  277. package/src/util/defer.ts +0 -12
  278. package/src/util/eventloop.ts +0 -20
  279. package/src/util/filesystem.ts +0 -83
  280. package/src/util/fn.ts +0 -11
  281. package/src/util/iife.ts +0 -3
  282. package/src/util/keybind.ts +0 -102
  283. package/src/util/lazy.ts +0 -18
  284. package/src/util/locale.ts +0 -81
  285. package/src/util/lock.ts +0 -98
  286. package/src/util/log.ts +0 -180
  287. package/src/util/queue.ts +0 -32
  288. package/src/util/rpc.ts +0 -42
  289. package/src/util/scrap.ts +0 -10
  290. package/src/util/signal.ts +0 -12
  291. package/src/util/timeout.ts +0 -14
  292. package/src/util/token.ts +0 -7
  293. package/src/util/wildcard.ts +0 -54
  294. package/src/worktree/index.ts +0 -217
  295. package/sst-env.d.ts +0 -9
  296. package/test/agent/agent.test.ts +0 -448
  297. package/test/bun.test.ts +0 -53
  298. package/test/cli/github-action.test.ts +0 -129
  299. package/test/cli/github-remote.test.ts +0 -80
  300. package/test/cli/tui/transcript.test.ts +0 -297
  301. package/test/config/agent-color.test.ts +0 -66
  302. package/test/config/config.test.ts +0 -870
  303. package/test/config/markdown.test.ts +0 -89
  304. package/test/file/ignore.test.ts +0 -10
  305. package/test/file/path-traversal.test.ts +0 -115
  306. package/test/fixture/fixture.ts +0 -45
  307. package/test/fixture/lsp/fake-lsp-server.js +0 -77
  308. package/test/ide/ide.test.ts +0 -82
  309. package/test/keybind.test.ts +0 -421
  310. package/test/lsp/client.test.ts +0 -95
  311. package/test/mcp/headers.test.ts +0 -153
  312. package/test/patch/patch.test.ts +0 -348
  313. package/test/permission/arity.test.ts +0 -33
  314. package/test/permission/next.test.ts +0 -652
  315. package/test/preload.ts +0 -63
  316. package/test/project/project.test.ts +0 -120
  317. package/test/provider/amazon-bedrock.test.ts +0 -236
  318. package/test/provider/provider.test.ts +0 -2127
  319. package/test/provider/transform.test.ts +0 -980
  320. package/test/server/session-select.test.ts +0 -78
  321. package/test/session/compaction.test.ts +0 -251
  322. package/test/session/message-v2.test.ts +0 -570
  323. package/test/session/retry.test.ts +0 -131
  324. package/test/session/revert-compact.test.ts +0 -285
  325. package/test/session/session.test.ts +0 -71
  326. package/test/skill/skill.test.ts +0 -185
  327. package/test/snapshot/snapshot.test.ts +0 -939
  328. package/test/tool/__snapshots__/tool.test.ts.snap +0 -9
  329. package/test/tool/bash.test.ts +0 -232
  330. package/test/tool/grep.test.ts +0 -109
  331. package/test/tool/patch.test.ts +0 -261
  332. package/test/tool/read.test.ts +0 -167
  333. package/test/util/iife.test.ts +0 -36
  334. package/test/util/lazy.test.ts +0 -50
  335. package/test/util/timeout.test.ts +0 -21
  336. package/test/util/wildcard.test.ts +0 -55
  337. package/tsconfig.json +0 -16
  338. /package/{script/postinstall.mjs → postinstall.mjs} +0 -0
package/src/mcp/oauth-callback.ts DELETED
@@ -1,200 +0,0 @@
1
- import { Log } from "../util/log"
2
- import { OAUTH_CALLBACK_PORT, OAUTH_CALLBACK_PATH } from "./oauth-provider"
3
-
4
- const log = Log.create({ service: "mcp.oauth-callback" })
5
-
6
- const HTML_SUCCESS = `<!DOCTYPE html>
7
- <html>
8
- <head>
9
- <title>OpenCode - Authorization Successful</title>
10
- <style>
11
- body { font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #1a1a2e; color: #eee; }
12
- .container { text-align: center; padding: 2rem; }
13
- h1 { color: #4ade80; margin-bottom: 1rem; }
14
- p { color: #aaa; }
15
- </style>
16
- </head>
17
- <body>
18
- <div class="container">
19
- <h1>Authorization Successful</h1>
20
- <p>You can close this window and return to OpenCode.</p>
21
- </div>
22
- <script>setTimeout(() => window.close(), 2000);</script>
23
- </body>
24
- </html>`
25
-
26
- const HTML_ERROR = (error: string) => `<!DOCTYPE html>
27
- <html>
28
- <head>
29
- <title>OpenCode - Authorization Failed</title>
30
- <style>
31
- body { font-family: system-ui, -apple-system, sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; background: #1a1a2e; color: #eee; }
32
- .container { text-align: center; padding: 2rem; }
33
- h1 { color: #f87171; margin-bottom: 1rem; }
34
- p { color: #aaa; }
35
- .error { color: #fca5a5; font-family: monospace; margin-top: 1rem; padding: 1rem; background: rgba(248,113,113,0.1); border-radius: 0.5rem; }
36
- </style>
37
- </head>
38
- <body>
39
- <div class="container">
40
- <h1>Authorization Failed</h1>
41
- <p>An error occurred during authorization.</p>
42
- <div class="error">${error}</div>
43
- </div>
44
- </body>
45
- </html>`
46
-
47
- interface PendingAuth {
48
- resolve: (code: string) => void
49
- reject: (error: Error) => void
50
- timeout: ReturnType<typeof setTimeout>
51
- }
52
-
53
- export namespace McpOAuthCallback {
54
- let server: ReturnType<typeof Bun.serve> | undefined
55
- const pendingAuths = new Map<string, PendingAuth>()
56
-
57
- const CALLBACK_TIMEOUT_MS = 5 * 60 * 1000 // 5 minutes
58
-
59
- export async function ensureRunning(): Promise<void> {
60
- if (server) return
61
-
62
- const running = await isPortInUse()
63
- if (running) {
64
- log.info("oauth callback server already running on another instance", { port: OAUTH_CALLBACK_PORT })
65
- return
66
- }
67
-
68
- server = Bun.serve({
69
- port: OAUTH_CALLBACK_PORT,
70
- fetch(req) {
71
- const url = new URL(req.url)
72
-
73
- if (url.pathname !== OAUTH_CALLBACK_PATH) {
74
- return new Response("Not found", { status: 404 })
75
- }
76
-
77
- const code = url.searchParams.get("code")
78
- const state = url.searchParams.get("state")
79
- const error = url.searchParams.get("error")
80
- const errorDescription = url.searchParams.get("error_description")
81
-
82
- log.info("received oauth callback", { hasCode: !!code, state, error })
83
-
84
- // Enforce state parameter presence
85
- if (!state) {
86
- const errorMsg = "Missing required state parameter - potential CSRF attack"
87
- log.error("oauth callback missing state parameter", { url: url.toString() })
88
- return new Response(HTML_ERROR(errorMsg), {
89
- status: 400,
90
- headers: { "Content-Type": "text/html" },
91
- })
92
- }
93
-
94
- if (error) {
95
- const errorMsg = errorDescription || error
96
- if (pendingAuths.has(state)) {
97
- const pending = pendingAuths.get(state)!
98
- clearTimeout(pending.timeout)
99
- pendingAuths.delete(state)
100
- pending.reject(new Error(errorMsg))
101
- }
102
- return new Response(HTML_ERROR(errorMsg), {
103
- headers: { "Content-Type": "text/html" },
104
- })
105
- }
106
-
107
- if (!code) {
108
- return new Response(HTML_ERROR("No authorization code provided"), {
109
- status: 400,
110
- headers: { "Content-Type": "text/html" },
111
- })
112
- }
113
-
114
- // Validate state parameter
115
- if (!pendingAuths.has(state)) {
116
- const errorMsg = "Invalid or expired state parameter - potential CSRF attack"
117
- log.error("oauth callback with invalid state", { state, pendingStates: Array.from(pendingAuths.keys()) })
118
- return new Response(HTML_ERROR(errorMsg), {
119
- status: 400,
120
- headers: { "Content-Type": "text/html" },
121
- })
122
- }
123
-
124
- const pending = pendingAuths.get(state)!
125
-
126
- clearTimeout(pending.timeout)
127
- pendingAuths.delete(state)
128
- pending.resolve(code)
129
-
130
- return new Response(HTML_SUCCESS, {
131
- headers: { "Content-Type": "text/html" },
132
- })
133
- },
134
- })
135
-
136
- log.info("oauth callback server started", { port: OAUTH_CALLBACK_PORT })
137
- }
138
-
139
- export function waitForCallback(oauthState: string): Promise<string> {
140
- return new Promise((resolve, reject) => {
141
- const timeout = setTimeout(() => {
142
- if (pendingAuths.has(oauthState)) {
143
- pendingAuths.delete(oauthState)
144
- reject(new Error("OAuth callback timeout - authorization took too long"))
145
- }
146
- }, CALLBACK_TIMEOUT_MS)
147
-
148
- pendingAuths.set(oauthState, { resolve, reject, timeout })
149
- })
150
- }
151
-
152
- export function cancelPending(mcpName: string): void {
153
- const pending = pendingAuths.get(mcpName)
154
- if (pending) {
155
- clearTimeout(pending.timeout)
156
- pendingAuths.delete(mcpName)
157
- pending.reject(new Error("Authorization cancelled"))
158
- }
159
- }
160
-
161
- export async function isPortInUse(): Promise<boolean> {
162
- return new Promise((resolve) => {
163
- Bun.connect({
164
- hostname: "127.0.0.1",
165
- port: OAUTH_CALLBACK_PORT,
166
- socket: {
167
- open(socket) {
168
- socket.end()
169
- resolve(true)
170
- },
171
- error() {
172
- resolve(false)
173
- },
174
- data() {},
175
- close() {},
176
- },
177
- }).catch(() => {
178
- resolve(false)
179
- })
180
- })
181
- }
182
-
183
- export async function stop(): Promise<void> {
184
- if (server) {
185
- server.stop()
186
- server = undefined
187
- log.info("oauth callback server stopped")
188
- }
189
-
190
- for (const [name, pending] of pendingAuths) {
191
- clearTimeout(pending.timeout)
192
- pending.reject(new Error("OAuth callback server stopped"))
193
- }
194
- pendingAuths.clear()
195
- }
196
-
197
- export function isRunning(): boolean {
198
- return server !== undefined
199
- }
200
- }
package/src/mcp/oauth-provider.ts DELETED
@@ -1,154 +0,0 @@
1
- import type { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js"
2
- import type {
3
- OAuthClientMetadata,
4
- OAuthTokens,
5
- OAuthClientInformation,
6
- OAuthClientInformationFull,
7
- } from "@modelcontextprotocol/sdk/shared/auth.js"
8
- import { McpAuth } from "./auth"
9
- import { Log } from "../util/log"
10
-
11
- const log = Log.create({ service: "mcp.oauth" })
12
-
13
- const OAUTH_CALLBACK_PORT = 19876
14
- const OAUTH_CALLBACK_PATH = "/mcp/oauth/callback"
15
-
16
- export interface McpOAuthConfig {
17
- clientId?: string
18
- clientSecret?: string
19
- scope?: string
20
- }
21
-
22
- export interface McpOAuthCallbacks {
23
- onRedirect: (url: URL) => void | Promise<void>
24
- }
25
-
26
- export class McpOAuthProvider implements OAuthClientProvider {
27
- constructor(
28
- private mcpName: string,
29
- private serverUrl: string,
30
- private config: McpOAuthConfig,
31
- private callbacks: McpOAuthCallbacks,
32
- ) {}
33
-
34
- get redirectUrl(): string {
35
- return `http://127.0.0.1:${OAUTH_CALLBACK_PORT}${OAUTH_CALLBACK_PATH}`
36
- }
37
-
38
- get clientMetadata(): OAuthClientMetadata {
39
- return {
40
- redirect_uris: [this.redirectUrl],
41
- client_name: "Chad Code",
42
- client_uri: "https://corethink.ai",
43
- grant_types: ["authorization_code", "refresh_token"],
44
- response_types: ["code"],
45
- token_endpoint_auth_method: this.config.clientSecret ? "client_secret_post" : "none",
46
- }
47
- }
48
-
49
- async clientInformation(): Promise<OAuthClientInformation | undefined> {
50
- // Check config first (pre-registered client)
51
- if (this.config.clientId) {
52
- return {
53
- client_id: this.config.clientId,
54
- client_secret: this.config.clientSecret,
55
- }
56
- }
57
-
58
- // Check stored client info (from dynamic registration)
59
- // Use getForUrl to validate credentials are for the current server URL
60
- const entry = await McpAuth.getForUrl(this.mcpName, this.serverUrl)
61
- if (entry?.clientInfo) {
62
- // Check if client secret has expired
63
- if (entry.clientInfo.clientSecretExpiresAt && entry.clientInfo.clientSecretExpiresAt < Date.now() / 1000) {
64
- log.info("client secret expired, need to re-register", { mcpName: this.mcpName })
65
- return undefined
66
- }
67
- return {
68
- client_id: entry.clientInfo.clientId,
69
- client_secret: entry.clientInfo.clientSecret,
70
- }
71
- }
72
-
73
- // No client info or URL changed - will trigger dynamic registration
74
- return undefined
75
- }
76
-
77
- async saveClientInformation(info: OAuthClientInformationFull): Promise<void> {
78
- await McpAuth.updateClientInfo(
79
- this.mcpName,
80
- {
81
- clientId: info.client_id,
82
- clientSecret: info.client_secret,
83
- clientIdIssuedAt: info.client_id_issued_at,
84
- clientSecretExpiresAt: info.client_secret_expires_at,
85
- },
86
- this.serverUrl,
87
- )
88
- log.info("saved dynamically registered client", {
89
- mcpName: this.mcpName,
90
- clientId: info.client_id,
91
- })
92
- }
93
-
94
- async tokens(): Promise<OAuthTokens | undefined> {
95
- // Use getForUrl to validate tokens are for the current server URL
96
- const entry = await McpAuth.getForUrl(this.mcpName, this.serverUrl)
97
- if (!entry?.tokens) return undefined
98
-
99
- return {
100
- access_token: entry.tokens.accessToken,
101
- token_type: "Bearer",
102
- refresh_token: entry.tokens.refreshToken,
103
- expires_in: entry.tokens.expiresAt
104
- ? Math.max(0, Math.floor(entry.tokens.expiresAt - Date.now() / 1000))
105
- : undefined,
106
- scope: entry.tokens.scope,
107
- }
108
- }
109
-
110
- async saveTokens(tokens: OAuthTokens): Promise<void> {
111
- await McpAuth.updateTokens(
112
- this.mcpName,
113
- {
114
- accessToken: tokens.access_token,
115
- refreshToken: tokens.refresh_token,
116
- expiresAt: tokens.expires_in ? Date.now() / 1000 + tokens.expires_in : undefined,
117
- scope: tokens.scope,
118
- },
119
- this.serverUrl,
120
- )
121
- log.info("saved oauth tokens", { mcpName: this.mcpName })
122
- }
123
-
124
- async redirectToAuthorization(authorizationUrl: URL): Promise<void> {
125
- log.info("redirecting to authorization", { mcpName: this.mcpName, url: authorizationUrl.toString() })
126
- await this.callbacks.onRedirect(authorizationUrl)
127
- }
128
-
129
- async saveCodeVerifier(codeVerifier: string): Promise<void> {
130
- await McpAuth.updateCodeVerifier(this.mcpName, codeVerifier)
131
- }
132
-
133
- async codeVerifier(): Promise<string> {
134
- const entry = await McpAuth.get(this.mcpName)
135
- if (!entry?.codeVerifier) {
136
- throw new Error(`No code verifier saved for MCP server: ${this.mcpName}`)
137
- }
138
- return entry.codeVerifier
139
- }
140
-
141
- async saveState(state: string): Promise<void> {
142
- await McpAuth.updateOAuthState(this.mcpName, state)
143
- }
144
-
145
- async state(): Promise<string> {
146
- const entry = await McpAuth.get(this.mcpName)
147
- if (!entry?.oauthState) {
148
- throw new Error(`No OAuth state saved for MCP server: ${this.mcpName}`)
149
- }
150
- return entry.oauthState
151
- }
152
- }
153
-
154
- export { OAUTH_CALLBACK_PORT, OAUTH_CALLBACK_PATH }